Add missing rbacs

Lately blockOwnerDeletion was added (finalizer fix PR). On OpenShift there is an additional protection, that setting blockOwnerDeletion requires to be able to set finalizers on the owner. The owner might be either VM or VMI. Add the missing rbacs. Signed-off-by: Or Shoval <[email protected]>
kubevirt · Aug 12, 2024 · b48a7c0 · b48a7c0
1 parent bb81fc5
commit b48a7c0
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 0 deletions.
diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
@@ -18,6 +18,11 @@ rules:
   - "virtualmachines"
   - "virtualmachineinstances"
   verbs: ["get", "list", "watch"]
+- apiGroups: ["kubevirt.io"]
+  resources:
+  - "virtualmachines/finalizers"
+  - "virtualmachineinstances/finalizers"
+  verbs: ["update"]
 - apiGroups: ["k8s.cni.cncf.io"]
   resources:
       - ipamclaims

diff --git a/dist/install.yaml b/dist/install.yaml
@@ -103,6 +103,13 @@ rules:
   - get
   - list
   - watch
+- apiGroups:
+  - kubevirt.io
+  resources:
+  - virtualmachines/finalizers
+  - virtualmachineinstances/finalizers
+  verbs:
+  - update
 - apiGroups:
   - k8s.cni.cncf.io
   resources: